An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.
Which DPD mode on FortiGate will meet this requirement?
The correct DPD mode that ensures FortiGate sends DPD probes only when no traffic is observed in the tunnel is 'On Idle'. This mode specifically triggers the sending of DPD probes when there is no traffic, accurately detecting dead tunnels under the given condition.
FortiGate_Infrastructure_7.2 page 288
Sorry wrong page its 256
this is the incorrect page correct page is 256
On Idle: FortiGate sends DPD probes when no traffic is observed in the tunnel.
B is correct
FortiGate Infrastructure 7.2 Study Guide p.256
B. On Idle Reference and download study guide: https://ebin.pub/fortinet-fortigate-infrastructure-study-guide-for-fortios-72.html
On Idle, opcion B
On Idle, so B is correct
Correct answer : B